Cyber Security Analyst (80-100%)

About the role

Join the Cyber Defense Center of Swissgrid, the operator of the Swiss electricity grid, and help protect both IT and OT networks. You will work on real‑world incidents, develop counter‑measures and contribute to the security of Switzerland’s critical energy infrastructure.

Key responsibilities

• Perform threat modelling and create new SIEM use cases.
• Analyse attacks, develop and coordinate counter‑measures during security incidents.
• Enhance the incident response process and conduct forensic analyses on compromised systems.
• Carry out threat‑hunting activities and stay up‑to‑date on the global threat landscape, especially in the energy sector.
• Lead engineering projects to improve or introduce security tools.
• Maintain communication with SOCs and CERTs of other critical infrastructure operators and authorities.
• Participate in on‑call duty (approximately 6‑8 weeks per year).

Required profile

• 3–4 years of hands‑on experience as a SOC Analyst or Incident Responder.
• Degree in Information Security, IT or a related field.
• Understanding of industrial control systems (ICS); knowledge of substation technical issues is a plus.
• Strong analytical and triage skills for security incidents.
• Very good English; German is an advantage.

Required skills

• SIEM, EDR and NDR technologies.
• Scripting with PowerShell, Bash and Python.
• Threat modelling, forensic analysis, incident response and threat hunting.

What we offer

• Independent and flexible working hours (42 hours per week).
• 25–30 vacation days plus company holidays between Christmas and New Year.
• State‑of‑the‑art office close to Aarau train station.
• Opportunities for professional development and training support.